$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft File: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft (raw, json) Hash identifier: +MV/aI0F5YNmVKakClqZo+vF9GQQPjV73iW6Ptv8E84= Subject key identifier: AE:80:6E:58:0E:A3:DF:07:F5:4D:0B:0F:B7:03:76:06:F7:A9:96:72 Authority key identifier: 0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 Certificate issuer: /CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Certificate serial: 15CB2E3344F67DB2A55F1E7FACA3F9AD671ECA56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:16:18 +0000 Manifest this update: Tue 02 Jun 2026 13:11:18 +0000 Manifest next update: Wed 03 Jun 2026 15:08:18 +0000 Files and hashes: 1: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: Pp4p1IAwL6T/SUuRHLsPL1o2X/hw7FiM+dsJ0iekdE8=) 2: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: EdEGFXLSGBP0MFU7fBfQCb+Ije/hW5JPZPkjvdhCXtQ=) 3: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl (hash: jTSYn5bOi4rV9GtLP0Wb2+ssV0oilhhEoqDHBS2LaCk=) 4: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: Si+I+kPmeWkzvO8zwLh244+U9aO/cSZUp2EBTlhcW1Q=) 5: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: OsAoJbYittbq+gZll27kuO9hviTpRYTbYAhazIaxU6I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cb:2e:33:44:f6:7d:b2:a5:5f:1e:7f:ac:a3:f9:ad:67:1e:ca:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Validity Not Before: Jun 2 13:11:18 2026 GMT Not After : Jun 3 15:08:18 2026 GMT Subject: CN=AE806E580EA3DF07F54D0B0FB7037606F7A99672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:3f:d6:f9:b8:e8:be:9a:74:b5:16:ce:e7: d7:21:7c:d0:a8:5a:12:4b:a4:de:3e:df:e9:d8:1e: 5b:64:c6:11:c9:73:02:5d:2e:1e:61:25:0f:78:d6: 30:65:d6:32:0d:c0:2d:88:4f:1e:2b:72:e2:12:81: 0f:b5:e6:29:bf:df:65:96:c0:6c:2f:0b:b5:07:f8: fb:9a:b8:7d:e3:44:c8:4e:ca:f1:9a:e3:84:2b:b3: fb:44:fe:ae:59:cb:fe:01:07:e8:4e:0a:c9:9c:20: f2:62:e5:20:b6:36:c1:6c:b3:12:f5:a6:39:6a:ad: a2:3e:a6:6f:23:51:5d:91:7b:77:da:55:f9:c9:46: d0:42:19:bd:2b:ec:5d:9f:f6:9e:9b:a2:e0:84:ba: 07:71:46:9c:9a:e2:52:ac:da:d5:ff:90:32:01:01: c8:49:a0:b5:84:83:20:8e:ed:fe:57:4a:bf:93:dd: 1c:10:39:52:6e:13:ac:3d:c2:24:eb:f5:d6:11:49: 68:ed:8a:4c:ac:96:b4:04:02:63:3a:75:8c:db:50: e5:96:06:7b:40:16:79:6a:6b:26:da:40:ca:68:a5: 7e:7f:ac:9a:b9:3d:0a:f9:34:fb:15:24:2d:76:0e: 23:01:ed:49:43:97:02:a4:a4:56:2c:8b:9c:cb:cb: 52:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:80:6E:58:0E:A3:DF:07:F5:4D:0B:0F:B7:03:76:06:F7:A9:96:72 X509v3 Authority Key Identifier: keyid:0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:14:c2:84:ae:c1:ae:1b:b2:d6:b3:67:2a:f8:1e:41:e3:a3: a9:44:91:54:84:20:d5:7e:db:dd:98:98:4f:78:9e:9e:c8:1c: 73:c1:d8:9c:28:10:2a:63:f6:b7:8f:84:c2:ea:ad:c9:4b:05: 8d:18:b9:de:9a:66:5e:10:1f:55:81:a6:b1:4a:84:74:8a:01: f6:cc:4d:78:72:b3:bf:a0:8b:a5:e2:05:b1:52:49:fd:37:19: 6d:eb:cc:22:a2:0d:af:1e:21:4d:9e:b6:b6:5a:1d:1c:19:59: 73:e9:3b:7c:9c:a6:ce:76:fe:9c:7b:fb:17:66:75:a0:de:bd: e3:c8:70:39:d2:09:14:cc:a6:39:9d:f1:8e:d7:fb:4a:cd:a2: 94:61:1e:ee:62:9e:a6:20:ce:ee:33:79:fc:c2:5e:e4:ca:ed: e9:3c:5a:47:4a:7b:30:fb:9c:eb:e3:9b:ee:27:1d:a8:1e:02: 17:07:8e:e1:5e:3d:b6:5d:06:23:46:b2:a4:bb:76:49:22:e7: 8c:41:b8:aa:be:c2:72:3a:e5:71:56:e9:76:b0:61:d8:82:fa: 9d:cd:fb:26:70:32:c7:8f:80:1a:6d:a5:c6:94:bb:be:6b:b5: 6a:e0:cc:97:f0:51:70:27:c7:f3:df:a5:e5:f1:b1:d4:dc:c7: c4:80:52:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcsuM0T2fbKlXx5/rKP5rWceylYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUExMDhE OUE2NDBGNjAeFw0yNjA2MDIxMzExMThaFw0yNjA2MDMxNTA4MThaMDMxMTAvBgNV BAMTKEFFODA2RTU4MEVBM0RGMDdGNTREMEIwRkI3MDM3NjA2RjdBOTk2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVD/W+bjovpp0tRbO59chfNCo WhJLpN4+3+nYHltkxhHJcwJdLh5hJQ941jBl1jINwC2ITx4rcuISgQ+15im/32WW wGwvC7UH+PuauH3jRMhOyvGa44Qrs/tE/q5Zy/4BB+hOCsmcIPJi5SC2NsFssxL1 pjlqraI+pm8jUV2Re3faVfnJRtBCGb0r7F2f9p6bouCEugdxRpya4lKs2tX/kDIB AchJoLWEgyCO7f5XSr+T3RwQOVJuE6w9wiTr9dYRSWjtikyslrQEAmM6dYzbUOWW BntAFnlqaybaQMpopX5/rJq5PQr5NPsVJC12DiMB7UlDlwKkpFYsi5zLy1L3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUroBuWA6j3wf1TQsPtwN2BveplnIwHwYDVR0j BBgwFoAUDpJ86c+uAZWXAdi6oxqhCNmmQPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE0OTNiZTEtZjA2NC00OWU2LTk0OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlD RkFFMDE5NTk3MDFEOEJBQTMxQUExMDhEOUE2NDBGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTkyN0NFOUNGQUUwMTk1OTcwMUQ4QkFBMzFBQTEwOEQ5QTY0 MEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUEx MDhEOUE2NDBGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8UwoSuwa4bstazZyr4HkHjo6lEkVSEINV+ 292YmE94np7IHHPB2JwoECpj9rePhMLqrclLBY0Yud6aZl4QH1WBprFKhHSKAfbM TXhys7+gi6XiBbFSSf03GW3rzCKiDa8eIU2etrZaHRwZWXPpO3ycps52/px7+xdm daDevePIcDnSCRTMpjmd8Y7X+0rNopRhHu5inqYgzu4zefzCXuTK7ek8WkdKezD7 nOvjm+4nHageAhcHjuFePbZdBiNGsqS7dkki54xBuKq+wnI65XFW6XawYdiC+p3N +yZwMsePgBptpcaUu75rtWrgzJfwUXAnx/PfpeXxsdTcx8SAUhA= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:45 2026 by rpki-client